Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier: AxK4bA/fSFFJKUlPIqWhqAyERObjXTYifDo03zoE5b0=
Subject key identifier: BE:D9:D7:47:1E:0E:4C:AA:1B:C7:4B:FF:F2:0E:F6:88:ED:B1:23:22
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 0198737457B40AC73833D1D909671C9E63E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number: 1623
Signing time: Mon 04 Aug 2025 05:01:01 +0000
Manifest this update: Mon 04 Aug 2025 05:01:01 +0000
Manifest next update: Tue 05 Aug 2025 05:01:01 +0000
Files and hashes: 1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: 7I4hgE4BFFvRcTz++pS4wJFWBo8bctlUbhlAHv/GFXE=)
2: SRL2XQIBoKefODwi32v5f2eOog8.roa (hash: Dn7L+HcQU8DFcaAaO+5zWbM9Yhm50QvkCe2vCWCUn7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:57:b4:0a:c7:38:33:d1:d9:09:67:1c:9e:63:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: Aug 4 05:01:01 2025 GMT
Not After : Aug 5 05:01:01 2025 GMT
Subject: CN=bed9d7471e0e4caa1bc74bfff20ef688edb12322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:e9:1d:c4:31:df:30:bd:4b:d3:24:e4:b6:
c0:b1:26:5f:76:2d:9c:f8:62:65:0d:63:e4:f1:a5:
fb:24:d3:f6:6c:70:e1:6a:e1:dd:ef:a6:40:b3:94:
ad:14:f0:74:62:fb:b1:35:a3:ca:6d:4f:6d:58:79:
e6:c6:b4:29:d3:f5:eb:f0:98:4a:cd:69:03:36:33:
24:0d:b0:42:3e:d3:67:76:2b:d8:a9:90:df:24:6f:
6c:81:4d:42:d7:fb:77:fb:cd:db:91:99:f9:4e:ff:
60:39:31:ca:99:49:a7:3b:53:9b:e1:0b:76:c7:a9:
65:2c:1a:ee:cf:e7:13:40:da:82:6a:32:b9:56:96:
eb:34:46:51:5d:9b:62:96:c4:59:1b:72:a8:df:8a:
68:46:93:21:10:22:0a:a5:94:3f:6f:02:3e:45:eb:
05:bc:f4:5c:9b:dc:73:0c:f2:95:da:90:b4:80:6b:
6b:a0:1d:e8:21:af:ce:a9:5e:c3:55:c3:3a:c4:87:
de:46:99:a5:9f:7d:33:8e:dd:53:b7:11:f6:d6:47:
dc:28:da:8b:e4:02:05:da:a9:79:e6:3f:95:60:7b:
bc:33:09:02:72:90:6b:f2:2b:41:cd:15:ca:52:40:
ab:13:2f:21:c8:f1:9f:c3:83:c1:07:ab:10:66:12:
5b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D9:D7:47:1E:0E:4C:AA:1B:C7:4B:FF:F2:0E:F6:88:ED:B1:23:22
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:19:af:dd:af:67:ea:ab:bc:2b:ad:ee:5b:ed:38:d1:d3:67:
fb:ac:cc:e8:7a:f3:d1:49:a7:b1:f3:c2:de:4a:9e:9a:e8:bb:
a6:ca:c6:47:89:5c:be:cf:12:3b:82:20:e1:3c:93:a7:39:45:
b2:83:c3:b9:c0:14:73:a4:26:fa:30:21:45:7f:ed:cf:f3:bb:
08:92:56:9b:10:c9:04:c2:a3:dd:a0:7c:08:6d:92:1a:7a:02:
ff:19:7d:67:a6:b3:fa:e9:7f:7c:44:d3:38:1a:c8:b2:2b:98:
6c:14:a3:59:21:40:67:1e:f7:e4:27:da:ef:43:00:24:00:71:
62:c8:31:fb:c9:65:67:84:a1:34:45:8d:16:82:21:11:a5:25:
1e:38:29:52:b6:c4:d3:bc:40:c6:28:fc:db:e3:dc:8a:97:80:
85:40:81:fd:79:1c:d6:01:04:a0:44:79:4f:9a:f0:0b:d8:b1:
bf:af:da:0e:c2:49:b5:63:9b:5b:44:a2:80:72:ff:9e:b3:08:
38:d4:dc:38:ec:0b:12:ba:24:d6:2f:43:8f:d0:02:0f:1a:ec:
72:4b:e8:3c:f4:4c:e4:85:6a:3e:71:e5:7c:50:62:27:fb:cb:
01:fd:51:f9:4b:db:22:f0:26:d6:62:74:da:90:ad:62:67:53:
bf:d4:db:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdFe0Csc4M9HZCWccnmPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MTI3NDJiOTFkNzcwZmU4ZWZiYzliNWRjZjhkYzM4OTg0
ZGQwZjAwHhcNMjUwODA0MDUwMTAxWhcNMjUwODA1MDUwMTAxWjAzMTEwLwYDVQQD
EyhiZWQ5ZDc0NzFlMGU0Y2FhMWJjNzRiZmZmMjBlZjY4OGVkYjEyMzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ7pHcQx3zC9S9Mk5LbAsSZfdi2c
+GJlDWPk8aX7JNP2bHDhauHd76ZAs5StFPB0YvuxNaPKbU9tWHnmxrQp0/Xr8JhK
zWkDNjMkDbBCPtNndivYqZDfJG9sgU1C1/t3+83bkZn5Tv9gOTHKmUmnO1Ob4Qt2
x6llLBruz+cTQNqCajK5VpbrNEZRXZtilsRZG3Ko34poRpMhECIKpZQ/bwI+ResF
vPRcm9xzDPKV2pC0gGtroB3oIa/OqV7DVcM6xIfeRpmln30zjt1TtxH21kfcKNqL
5AIF2ql55j+VYHu8MwkCcpBr8itBzRXKUkCrEy8hyPGfw4PBB6sQZhJbQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7Z10ceDkyqG8dL//IO9ojtsSMiMB8GA1UdIwQY
MBaAFNYSdCuR13D+jvvJtdz43DiYTdDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8xM2ZiNjUtNGVlNy00MDI2LWFhM2Et
OWQ1NmUzYWRjYTkwLzEvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8xM2ZiNjUtNGVlNy00MDI2LWFhM2EtOWQ1NmUzYWRjYTkw
LzEvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixmv3a9n
6qu8K63uW+040dNn+6zM6Hrz0UmnsfPC3kqemui7psrGR4lcvs8SO4Ig4TyTpzlF
soPDucAUc6Qm+jAhRX/tz/O7CJJWmxDJBMKj3aB8CG2SGnoC/xl9Z6az+ul/fETT
OBrIsiuYbBSjWSFAZx735Cfa70MAJABxYsgx+8llZ4ShNEWNFoIhEaUlHjgpUrbE
07xAxij82+PcipeAhUCB/Xkc1gEEoER5T5rwC9ixv6/aDsJJtWObW0SigHL/nrMI
ONTcOOwLErok1i9Dj9ACDxrsckvoPPRM5IVqPnHlfFBiJ/vLAf1R+UvbIvAm1mJ0
2pCtYmdTv9TbLA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:08 2025 by rpki-client